This Policy explains how personal data is handled when you visit our website, apply for access, purchase or use Saint Elmo’s Fire, connect another service or contact us.
1. Controller
Kolektivo Labs, Unipessoal Lda is the controller for Fire account, product, application and support data.
2. Data we process
Depending on how you use the Services, we may process:
- Account data: name, email address, login identifiers, settings, organisation and seat membership.
- Application and support data: details, messages, preferences, feedback and support history you submit.
- Billing data: plan, amount, currency, tax information, payment status, transaction identifiers and refund status. We do not receive or store your complete card number or card-security code.
- Work data: prompts, conversations, files, instructions, generated output, agent settings and work history you choose to process through Fire.
- Connection data: connected tools, model providers and accounts, together with the credentials and metadata needed to operate the connection.
- Technical data: IP address, device and browser information, timestamps, logs, diagnostic events, security events and session identifiers.
Google Sign-In
Google Sign-In. If you choose to sign in with Google, Google provides basic account information to Fire through Clerk, our authentication provider. This information may include your Google Account’s unique identifier, name, primary email address, email-verification status and profile image. We use it only to create or link your Fire account, authenticate you, maintain and secure your session, and display your account profile. We do not use Google Account data for advertising, sell it, or request access to Gmail, Google Drive, Google Calendar, Google Contacts or other Google services. Clerk processes this information on our behalf as an authentication service provider. We retain and delete this information as described in the Retention and Your rights sections below. You may revoke Fire’s Google connection from your Google Account settings; revocation stops future access but does not by itself delete your Fire account or information already retained under this Policy. To request deletion, contact fire@dearsaintelmo.com.
3. Why we process data
We process personal data to:
- provide accounts, workspaces, connected services and support;
- administer purchases, subscriptions, seats and access;
- review access or membership applications;
- secure, troubleshoot and maintain the Services;
- prevent fraud and abuse;
- comply with accounting, tax, legal and consumer-protection obligations; and
- send optional communications when you have requested or consented to them.
Our legal bases under the GDPR include performance of a contract, steps requested before a contract, compliance with legal obligations, our legitimate interests in operating and securing the Services, and consent where specifically requested.
We do not sell personal data or use it for third-party behavioural advertising.
4. Payments
Self-service payment information is collected directly by Stripe and Link through Managed Payments. The applicable Stripe or Link entity acts as seller of record and as an independent controller for payment, tax, fraud-prevention, dispute and compliance activities. Its privacy terms are presented during checkout.
We receive only the customer, transaction, subscription and payment-status information needed to provide access, maintain entitlements and support customers.
5. Service providers and other recipients
We use providers for functions such as authentication, hosting, storage, email, support, security, payment processing and AI/model processing. They receive only the data reasonably necessary to provide their service.
When you use a connected model or tool, relevant prompts, files, context or instructions may be sent to that provider to perform your request. Third-party providers may process data under their own terms where you select or connect them directly.
We may also disclose data to professional advisers or public authorities where legally required.
6. International transfers
Some providers may process data outside Portugal or the European Economic Area. Where required, we use a recognised legal safeguard such as an adequacy decision or the European Commission’s Standard Contractual Clauses.
7. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected. The criteria include whether an account remains active, whether the data is needed to provide or secure the Services, applicable limitation periods and accounting, tax or other legal requirements.
When data is no longer needed, it is deleted or anonymised, subject to reasonable backup cycles and records that must be retained by law.
8. Security
We use reasonable technical and organisational measures designed to protect personal data, including access controls, managed authentication, encryption in transit and security logging. No online service can guarantee absolute security.
Contact fire@dearsaintelmo.com promptly if you believe an account has been compromised.
9. Cookies and website data
Our public Fire and legal pages do not intentionally use advertising cookies or cross-site behavioural tracking. Hosting and font providers receive ordinary web-request data, such as IP address, browser information, requested URL and timestamp, when delivering a page or font.
Authenticated parts of Fire may use cookies or local storage that are necessary for sign-in, security and essential preferences. Blocking them may prevent the Services from working.
If we introduce non-essential cookies that require consent, we will request consent before they are used.
10. Your rights
Subject to applicable law, you may ask to access, correct, delete or restrict your personal data; receive portable data; object to certain processing; or withdraw consent.
Send requests to fire@dearsaintelmo.com. We may need to verify your identity.
You may complain to the Portuguese data-protection authority, the Comissão Nacional de Proteção de Dados, or to another competent supervisory authority.
11. Children
The Services are not currently offered for purchase or independent administration by anyone under 18. Contact us if you believe a child has provided personal data so we can investigate and delete it where appropriate.
12. Changes
We may update this Policy to reflect changes to the Services, providers or law. We will publish the updated date and provide additional notice where required.
Questions and privacy requests may be sent to fire@dearsaintelmo.com.